$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2cbbf53c-f73d-3777-9460-5deb463a2b52.roa File: 2cbbf53c-f73d-3777-9460-5deb463a2b52.roa (raw, json) Hash identifier: kURgcmpwrwH3HNAjP8WHr/66NyX5oa25SgIMVF/OFaA= Subject key identifier: 18:36:E0:61:29:70:58:11:43:E1:F8:23:56:E2:BD:5F:BA:A8:28:7E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858486AC59C7B22102AA5F3421580 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2cbbf53c-f73d-3777-9460-5deb463a2b52.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 13576 IP address blocks: 64.33.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:9c:7b:22:10:2a:a5:f3:42:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=223bf8e6-dbc2-4b3b-8297-bc495fe916f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:a7:89:58:48:31:5b:64:29:b2:c4:52:65: e4:ce:44:ce:65:4b:a8:af:88:83:5f:31:6e:91:16: 2a:85:80:8e:4d:64:9b:e6:b4:59:27:4c:57:6f:cc: 0a:45:a2:28:cf:16:68:93:d6:68:b5:44:fb:2d:2c: 25:db:0d:9c:47:06:73:80:72:ec:48:1d:08:15:74: 13:4e:c3:38:8a:90:4e:af:c9:d7:17:03:82:8b:97: e6:f3:fa:3f:65:15:af:0a:0f:35:fe:f0:e8:9c:02: 7e:b8:df:df:75:09:af:4a:c7:ee:88:25:21:fe:a1: 7d:a1:ca:9d:7e:15:35:5e:39:94:9f:ff:e1:25:37: 38:56:be:d1:20:41:d7:72:75:1b:cc:95:29:bc:ab: 53:cb:59:97:91:b9:63:32:f0:b0:47:58:69:52:7d: dc:a6:e3:06:0a:65:0d:c7:70:5e:e6:2e:52:8d:b1: 4a:9f:ee:1f:8d:d7:2d:c9:1b:de:1f:ce:09:a0:d1: ee:34:d4:64:e5:e7:c5:9c:de:e5:79:58:d4:36:ef: ad:c9:b6:78:eb:85:53:7f:62:66:b1:a5:30:82:5b: 2b:81:e1:97:f4:8c:54:46:d0:74:37:5f:56:12:83: 21:53:f7:19:06:97:cb:b4:e3:c9:d8:85:e7:95:d3: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:36:E0:61:29:70:58:11:43:E1:F8:23:56:E2:BD:5F:BA:A8:28:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2cbbf53c-f73d-3777-9460-5deb463a2b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:1b:4a:fd:b9:f8:73:7d:11:70:c5:40:5c:71:c4:b0:51:94: 81:66:0d:da:df:ad:26:28:da:3c:72:bb:27:e0:34:64:52:73: 13:7e:85:75:5b:67:b5:bc:37:25:55:18:bf:35:eb:fc:d3:3f: 06:c2:32:56:b3:e7:3c:58:f9:4d:11:02:f8:83:2a:e9:3d:05: bc:a9:0a:85:10:36:4f:a8:fd:c4:ce:77:f9:91:b4:b7:9e:0a: 10:c3:92:f1:9b:94:6a:66:e3:a2:f4:af:30:ba:70:80:a4:6f: 97:67:dc:b6:66:1b:1a:8a:3b:c9:b2:a4:0a:a0:98:23:ab:47: 98:aa:89:eb:9d:ce:54:31:24:77:ce:3b:60:32:53:ca:f3:e3: 42:29:d1:09:3c:3c:2c:c0:07:86:44:b2:05:c8:5e:12:04:da: 49:e4:f2:59:f3:7a:5b:bf:9d:a5:a7:be:b1:c9:26:d1:b8:d1: 88:03:23:3d:0d:11:68:cb:8e:76:98:0f:02:21:27:4d:da:fd: 7b:67:67:9b:69:c4:1d:99:e1:29:24:f2:b8:8d:d3:92:5e:8b: 6b:c3:fc:a8:18:dc:a8:6d:7b:13:00:ac:72:05:77:fa:07:e7: 32:f8:d9:68:fd:39:f8:78:12:8c:fa:92:c3:80:46:ac:82:05: 57:0f:be:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZx7IhAqpfNCFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MjIzYmY4ZTYtZGJjMi00YjNiLTgyOTctYmM0OTVmZTkxNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcSniVhIMVtkKbLEUmXkzkTOZUuor4iDXzFu kRYqhYCOTWSb5rRZJ0xXb8wKRaIozxZok9ZotUT7LSwl2w2cRwZzgHLsSB0IFXQT TsM4ipBOr8nXFwOCi5fm8/o/ZRWvCg81/vDonAJ+uN/fdQmvSsfuiCUh/qF9ocqd fhU1XjmUn//hJTc4Vr7RIEHXcnUbzJUpvKtTy1mXkbljMvCwR1hpUn3cpuMGCmUN x3Be5i5SjbFKn+4fjdctyRveH84JoNHuNNRk5efFnN7leVjUNu+tybZ464VTf2Jm saUwglsrgeGX9IxURtB0N19WEoMhU/cZBpfLtOPJ2IXnldN+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg24GEpcFgRQ+H4I1bivV+6qCh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmNiYmY1M2MtZjczZC0z Nzc3LTk0NjAtNWRlYjQ2M2EyYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8bSv25+HN9EXDFQFxxxLBRlIFmDdrfrSYo2jxyuyfgNGRScxN+hXVb Z7W8NyVVGL816/zTPwbCMlaz5zxY+U0RAviDKuk9BbypCoUQNk+o/cTOd/mRtLee ChDDkvGblGpm46L0rzC6cICkb5dn3LZmGxqKO8mypAqgmCOrR5iqieudzlQxJHfO O2AyU8rz40Ip0Qk8PCzAB4ZEsgXIXhIE2knk8lnzelu/naWnvrHJJtG40YgDIz0N EWjLjnaYDwIhJ03a/XtnZ5tpxB2Z4Skk8riN05Jei2vD/KgY3KhtexMArHIFd/oH 5zL42Wj9Ofh4Eoz6ksOARqyCBVcPvkQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:18 2025 by rpki-client